From 7bcced377bf4a50fc27d6e6fa4d0b180a78807d2 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Sat, 4 Mar 2023 13:00:40 +0000 Subject: [PATCH 1/1] Revert "Only flush our table to avoid disrupting other nftables users" This reverts commit 400fc6d71c476dba84aa52c5bf694caa8c4346dd. --- cookbooks/networking/templates/default/nftables.conf.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/networking/templates/default/nftables.conf.erb b/cookbooks/networking/templates/default/nftables.conf.erb index 6a2d72b8e..63f45a0c8 100644 --- a/cookbooks/networking/templates/default/nftables.conf.erb +++ b/cookbooks/networking/templates/default/nftables.conf.erb @@ -5,7 +5,7 @@ define external-interfaces = { <%= @interfaces.sort.uniq.join(", ") %> } define ip-private-addresses = { 10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.0.2.0/24, 192.168.0.0/16 } define ip6-private-addresses = { 2001:db8::/32, fc00::/7 } -flush table inet filter +flush ruleset table inet filter { set ip-osm-addresses { -- 2.39.5